1.4.2 Application: Retain old events

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This control determines Event Log behavior when the log file reaches its maximum size.

Solution

Make sure 'Application: Retain old events' is Disabled so older log events will be overwritten.

See Also

https://workbench.cisecurity.org/files/10

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-11, CCE|CCE-2541-1

Plugin: Windows

Control ID: ae08904a9d0915b334c5f714b406f2c2a85df3ff87a3e9c3c9c106f57e90c5be